65 matches found
CVE-2004-1062
CVE-2004-1062 involves multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2. The affected component is the ViewCVS web interface, with the root cause described as the ability to inject arbitrary HTML and web script via certain error messages. Reported impact is that an attacker co...
CVE-2004-1062: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML and web script via certain error messages...
CVE-2004-1062
Multiple cross-site scripting XSS vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML and web script via certain error messages...
CVE-2004-1062
Multiple cross-site scripting XSS vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML and web script via certain error messages...
ViewCVS < 1.0.0 HTTP Response Splitting
Binary data 2478.prm...
ViewCVS < 1.0.0 Multiple Vulnerabilities
The remote host is running ViewCVS, a tool to browse CVS repositories over the web written in python. Flaws in the remote version of this website may allow an attacker to launch cross-site scripting and/or HTTP response-splitting attacks against the remote install. %NASLMINLEVEL 70300 C Tenable...
ViewCVS: Information leak and XSS vulnerabilities
Background ViewCVS is a browser interface for viewing CVS and Subversion version control repositories through a web browser. Description The tar export functions in ViewCVS bypass the 'hidecvsroot' and 'forbidden' settings and therefore expose information that should be kept secret CAN-2004-0915...
GLSA-200412-26 : ViewCVS: Information leak and XSS vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200412-26 ViewCVS: Information leak and XSS vulnerabilities The tar export functions in ViewCVS bypass the 'hidecvsroot' and 'forbidden' settings and therefore expose information that should be kept secret CAN-2004-0915...
CVE-2004-0915
CVE-2004-0915 concerns viewcvs: when exporting a repository as a tar archive, the hide_cvsroot and forbidden settings are not properly enforced, enabling potential information leakage. The issue affects viewcvs versions prior to 0.9.2 and is documented across multiple sources (e.g., NVD entry and...
CVE-2004-0915
Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not properly implement the hidecvsroot and forbidden settings, which could allow remote attackers to gain sensitive information...
CVE-2004-0915: Undefined Security Weakness
Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not properly implement the hidecvsroot and forbidden settings, which could allow remote attackers to gain sensitive information...
[SECURITY] [DSA 605-1] New viewcvs packages fix information leak
-------------------------------------------------------------------------- Debian Security Advisory DSA 605-1 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 605-1] New viewcvs packages fix information leak
-------------------------------------------------------------------------- Debian Security Advisory DSA 605-1 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2004 http://www.debian.org/security/faq -...
[Full-Disclosure] [SECURITY] [DSA 605-1] New viewcvs packages fix information leak
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 605-1 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2004 http://www.debian.org/security/faq -...
DSA-605-1 viewcvs - settings not honored
Bulletin has no description...
Debian DSA-605-1 : viewcvs - settings not honored
Haris Sehic discovered several vulnerabilities in viewcvs, a utility for viewing CVS and Subversion repositories via HTTP. When exporting a repository as a tar archive the hidecvsroot and forbidden settings were not honoured enough. When upgrading the package for woody, please make a copy of your...
ViewCVS < 1.0-dev Multiple Unspecified Vulnerabilities
Binary data 2446.prm...
viewcvs -- information leakage
The hidecvsroot and forbidden configuration options are not properly honored by viewcvs when exporting to a tar file which can lead to information leakage...
ViewCVS viewcvs.cgi Multiple Parameter XSS
The remote host is running ViewCVS, a tool written in Python to browse CVS repositories via the web. The version of ViewCVS running on the remote host has a cross-site scripting vulnerability. Input to the 'viewcvs' parameter is not properly sanitized. A remote attacker could exploit this by...